This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: x52d1T945GU//gWwXIFsY/a1IgzbXgvc7RUyOIaISbg=
Subject key identifier: 6B:02:12:86:F8:D2:F1:C2:F7:B1:B2:78:25:8B:22:E0:CF:08:E8:89
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 019BF507A61A318E1FB054437F83A0B3EED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0D55
Signing time: Sun 25 Jan 2026 12:01:17 +0000
Manifest this update: Sun 25 Jan 2026 12:01:17 +0000
Manifest next update: Mon 26 Jan 2026 12:01:17 +0000
Files and hashes: 1: Eo8KA9T6HD9p4ZSTDc0r_PeW2ik.roa (hash: 6EGWa/823S4j3qzNZzVNi7+aLxh9oMMF178PdW3UF1g=)
2: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: jbSOGy3ZpK5RQFnKEee3bsNMjbUziFnJeq2DwiDU8gc=)
3: uR6qk5DeglUWNbzyA8X_zxBn_Us.roa (hash: 7cX65e6MFwNlQSj+gYDD5WGRNzvo97dTNPuyxMqN7k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:a6:1a:31:8e:1f:b0:54:43:7f:83:a0:b3:ee:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Jan 25 12:01:17 2026 GMT
Not After : Jan 26 12:01:17 2026 GMT
Subject: CN=6b021286f8d2f1c2f7b1b278258b22e0cf08e889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:ea:ff:f6:68:76:e4:78:f1:04:60:23:07:
ab:f6:f5:18:43:e6:18:78:90:a4:30:6d:5d:c4:03:
bf:5f:c9:f8:fb:22:e5:14:ab:6c:23:27:bc:94:ea:
d0:13:5a:b4:c5:b1:b8:f6:c0:60:06:cb:a5:d4:30:
dd:e9:bf:50:c4:37:47:3b:a0:da:b4:c0:c9:e2:6d:
eb:e0:70:5b:77:3a:62:d9:5e:66:80:d7:7b:1f:ce:
69:be:b9:3c:7b:e7:2b:b1:c7:a5:6b:08:2f:6e:b9:
dc:06:20:d7:b8:9a:2d:64:24:0f:b0:cf:49:23:de:
02:9f:a1:34:d8:b0:ac:c5:fb:0d:15:29:3b:77:7f:
20:81:89:ac:11:9b:d6:39:83:b9:48:7e:d0:05:41:
c6:19:d6:e3:ef:0d:e8:45:e7:65:9e:e6:08:07:32:
a0:cd:09:73:89:e3:5e:d3:1e:d6:dd:15:66:d0:3e:
38:1b:9e:55:78:e8:1d:48:81:18:06:46:ff:84:93:
c4:23:67:c6:6f:27:8e:09:59:ee:10:d6:40:9c:d9:
b1:8d:24:04:5c:14:45:00:ea:79:77:2c:27:68:67:
28:3e:59:6d:07:47:40:fe:52:5d:16:e7:85:b8:e2:
e6:1f:52:c7:12:41:a2:6e:52:ac:0e:72:18:5e:32:
33:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:02:12:86:F8:D2:F1:C2:F7:B1:B2:78:25:8B:22:E0:CF:08:E8:89
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:79:6d:93:d0:5c:d3:c4:41:ca:b0:d2:70:d6:42:26:73:3d:
eb:9c:bd:03:de:7a:5a:d2:c4:8c:4f:b1:4e:e8:bf:04:76:bb:
3a:a1:f1:c8:29:e3:46:a6:35:b9:3d:17:4b:93:69:19:05:7f:
73:f2:35:bc:40:68:73:8c:a2:40:e1:23:ea:b4:80:ea:2f:d2:
d6:a9:d9:ab:89:dd:26:7b:24:f3:d1:eb:1c:54:2d:2b:95:20:
80:e2:34:a6:81:2a:a0:1f:af:e0:4f:d6:99:5c:1a:ae:3e:73:
bd:e7:16:7f:04:18:08:3e:a1:63:c1:14:59:d5:2a:d2:ff:b6:
e4:4c:70:e8:ee:3a:50:db:f0:fb:58:53:f6:0c:3c:13:4a:84:
78:78:99:ac:81:1d:b2:e7:75:fb:0b:ed:b0:f5:19:08:55:96:
5a:34:26:83:ed:3c:16:56:3a:0a:43:f1:a6:aa:57:c9:30:7a:
d8:15:cb:a3:ce:20:18:d5:99:70:2b:de:70:f1:d9:04:53:30:
08:e4:e5:71:c9:e8:fd:82:d2:9a:82:b4:4e:60:36:56:e4:5e:
7a:42:21:9e:58:e2:5c:36:fe:64:7c:45:61:93:1a:23:1a:57:
9a:d5:48:ab:77:bf:83:2a:d0:6b:f8:64:2e:73:cd:85:7d:f5:
7d:37:06:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:44:43 2026 by rpki-client